[MEDIUM] Winter: CSRF through AJAX handler names reachable as backend page actions

PKSA-r35b-91gt-bn2p GHSA-p2ch-c2c3-4xm5

Affected package: winter/wn-backend-module

Affected version: >=1.0.319,<1.2.14

Reported by:
GitHub